Commit Graph
206 Commits
Author SHA1 Message Date
Madhu Rajanna 187bea6701 csi: disable liveness sidecar by default
A Liveness sidecar container that is deployed
with the CSI pods will be helpful to check
csi driver is properly responding or not.
and there is no liveness or readiness
kubernetes probe added for this one.
Providing an option to enable this
sidecar deployment and disabling it by default.

fixes #8783

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
2022-07-28 14:01:26 +05:30
Travis Nielsen 3b6cc45113 Merge pull request #10626 from anthonyeleven/anthonyeleven/prom-localrules-tweaks
Improve descriptions in localrules.yaml
2022-07-27 11:40:23 -06:00
Travis Nielsen c2991de238 Merge pull request #10580 from gauravsitlani/cephfs-mirroring-test
docs: CephFS mirroring updates around Peer Tokens
2022-07-27 10:25:24 -06:00
Gaurav Sitlani 27f2098ad9 docs: cephfs mirroring updates around peer tokens
This commit updates the CephFS mirroring documentation
around Peer tokens to get the token created correctly.

Signed-off-by: Gaurav Sitlani <gauravsitlani@riseup.net>
2022-07-27 21:52:21 +05:30
Anthony D'Atri dc53497d37 docs: improve descriptions in localrules.yaml
Parallel upstream changes via https://github.com/ceph/ceph/pull/47284

Signed-off-by: Anthony D'Atri <anthonyeleven@users.noreply.github.com>
2022-07-26 16:32:29 -07:00
subhamkrai 4501cc25c6 ci: use ceph v17.2.1 instead of latest v17
there could be something breaking with latest ceph.
So, let's stick to v17.2.1.

Signed-off-by: subhamkrai <srai@redhat.com>
2022-07-25 20:14:52 +05:30
Travis Nielsen fc541764f1 Merge pull request #10484 from jsoref/spelling
core: fix spelling
2022-07-15 08:31:41 -06:00
Travis Nielsen 37a4d9e959 Merge pull request #10491 from zhucan/feat-10451
object: network mode can be set separately for cephcluster and rgw
2022-07-14 11:21:26 -06:00
Ali, Akil 25265bc9c2 external: fix secrets naming
The secrets are being created with "rook-" prefix, but used without it.
Signed-off-by: Ali, Akil <ali-akil@gmx.de>
2022-07-14 16:55:45 +02:00
Blaine Gardner 7cbda4d814 Merge pull request #10563 from parth-gr/rbac-wildcard
core: remove all wildcard permissions in rbac definations
2022-07-08 11:36:54 -06:00
parth-gr 50daeb29e5 core: remove all wildcard permissions in rbac definations
Reduce the RBAC scope to the minimum necessary
permissions for rook to operator

Signed-off-by: parth-gr <paarora@redhat.com>
2022-07-08 20:50:59 +05:30
Josh Soref 6e7b8767f3 core: fix spelling
* another
* are
* availability
* available
* bootstrap
* boundaries
* ceph
* certificate
* class
* codifies
* consuming
* corrupted
* createor
* csi
* deployments
* exceeded
* execute
* filesystem
* healthiness
* heuristics
* immediately
* insecure
* installed
* isolated
* maintained
* maximum
* minute
* monitor
* new
* nginx
* nonexistent
* not
* occurs
* omitempty
* operator
* orchestration
* persistentvolumes
* placement
* preexisting
* prometheus
* protecting
* provisioner
* purposes
* reconcile
* regex
* related
* requests
* returns
* rubbish
* running
* schedulable
* schedule
* serviceaccount
* simulating
* snapshots
* statement
* static
* tenants
* the
* unavailable
* volumeattachment
* waiting
* with
* wrapper
* zonegroup

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
2022-07-07 18:10:47 -04:00
Travis Nielsen dad97f3425 core: remove support for ceph octopus
With octopus coming to end of life, we remove support from
Rook for deploying Ceph Octopus and assume a min version of
Pacific v16. Any checks for octopus or earlier are removed
from the reconciles since they are obsolete.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2022-07-07 15:03:26 -06:00
Santosh Pillai 693c2d9306 manifest: use Recreate strategy for operator upgrade
Use `Recreate` strategy instead of `RollingUpdate` for
rook-ceph-operator deployement upgrade

Signed-off-by: Santosh Pillai <sapillai@redhat.com>
2022-07-04 15:28:42 +05:30
zhucan 6f6c26009c object: generated code
Signed-off-by: zhucan <zhucan.k8s@gmail.com>
2022-06-30 10:55:24 +08:00
Travis Nielsen febce342b7 manifest: inline toolbox script for direct use of ceph image
The toolbox is really only used for ceph commands. The main reason
the rook image was being used in the toolbox pod was for the script
that generates the ceph.conf and updates it whenever the mons are
updated during mon failover.

Now the ceph image can be specified directly by moving the script
inline with the container definition instead of being required
in the image.

The rook image will still contain the script for backward compatibility
and for scenarios where the rook binary may still be needed

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2022-06-28 17:19:22 -06:00
parth-gr c9a864ccdb external: add support for subvolumegroup and rados namespace
Using subvolume group and rados namespace for external deployment
was complicated and not documented,
Automating the process for the users, so they just need to pass
the respective names by cli flag for creation

Closes: rook#10427

Signed-off-by: parth-gr <paarora@redhat.com>
2022-06-28 21:57:54 +05:30
Blaine Gardner 0efd2aa340 Merge pull request #10400 from subhamkrai/staticcheck-python
ci: add check for unused or dead code in py file
2022-06-27 11:25:28 -06:00
subhamkrai fa1eed1d4e core: fix lint issue in python files
Signed-off-by: subhamkrai <srai@redhat.com>
2022-06-27 16:53:01 +05:30
Travis Nielsen eb08b009ba build: update to latest quincy release 17.2.1
With the latest quincy release, we update the operator base image
and examples to use 17.2.1

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2022-06-24 15:57:19 -06:00
Blaine Gardner c03f7c53b8 Merge pull request #10442 from Rakshith-R/csi-token-create-rbac
csi: add token create rbac for rbd csi clusterrole
2022-06-17 12:07:21 -06:00
Niels de Vos 5dbb9a919d csi: update CSI-Addons side-car to latest (v0.4.0) release
A new version of the CSI-Addons side-car has been released, fixing
several bugs and adding small enhancements.

See-also: https://github.com/csi-addons/kubernetes-csi-addons/releases/tag/v0.4.0
Signed-off-by: Niels de Vos <ndevos@redhat.com>
2022-06-16 09:58:54 +02:00
Rakshith R 623c5159d5 csi: add token create rbac for rbd csi clusterrole
This rbac is required to fetch serviceaccount
token for vault tenant sa encryption type on k8s 1.24+.
refer: https://github.com/ceph/ceph-csi/pull/3174

Signed-off-by: Rakshith R <rar@redhat.com>
2022-06-14 10:18:20 +05:30
Travis Nielsen a27a2aa4ca Merge pull request #10405 from humblec/master-label
mon: update node labels as per new key value
2022-06-10 08:03:43 -06:00
Humble Chirammal 750faa5747 mon: update node labels as per new key value
From kube v1.24 onwards, Kubeadm applies a "node-role" label to its
control plane Nodes.Currently this label key is node-role.kubernetes.io/master
and it will be renamed to node-role.kubernetes.io/control-plane. Kubeadm
also uses the same "node-role" as key for a taint it applies on control
plane Nodes. This taint key should also be renamed to
"node-role.kubernetes.io/control-plane".

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2022-06-10 08:12:04 +05:30
Madhu Rajanna 3e70d278cb csi: update cephcsi from 3.6.1 to 3.6.2
As we have new cephcsi patch release i.e v3.6.2
updating Rook dependency to the same.

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
2022-06-09 14:52:51 +05:30
parth-gr b7c165b411 csi: make storage class updated with csi-users in external cluster
For using restricted auth users we need to update the
restricted users in the Storage class, so updating
it in the json output for external cluster

Signed-off-by: parth-gr <paarora@redhat.com>
2022-06-08 14:49:46 +05:30
parth-gr dcba689129 csi: update restricted auth flag
remove the restriction of per rados namespace as
there can be multiple namespaces and the csi-users
can only have 1 type in a storage class

Signed-off-by: parth-gr <paarora@redhat.com>
2022-06-08 14:21:49 +05:30
Travis Nielsen 5d17a4089e Merge pull request #10399 from subhamkrai/format-python-files
external: format python files using tool black
2022-06-07 09:35:35 -06:00
Travis Nielsen 10efd34fd5 Merge pull request #10306 from Madhu-1/update-snap-v6
csi: update sidecar to latest release
2022-06-07 08:41:13 -06:00
Madhu Rajanna 767cfcbf09 csi: update sidecar to latest release
updating node-driver-registrar to v2.5.1 release
, nfsplugin to 4.0.0 and csi-snapshotter to v6.0.1

Note:- with snapshotter v6.0.1 v1beta1 snapshot CRD
is not supported. If you want betav1 snapshot support
please switch to v5.x.x snapshotter.

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
2022-06-07 19:27:13 +05:30
parth-gr 38dcf09843 build: update examples and base image to use ceph v17.2.0 quincy version
The operator base image has been changed to
ceph v17.2.0 quincy release version `quay.io/ceph/ceph:v17.2.0`

Closes: https://github.com/rook/rook/issues/10140
Signed-off-by: parth-gr <paarora@redhat.com>
2022-06-07 12:55:47 +05:30
subhamkrai 00f21c0866 external: format python files using tool black
`black` is python formatter tool which
automatically formats python files without
manual changing. just run `black <python-file>`
and done.

Signed-off-by: subhamkrai <srai@redhat.com>
2022-06-06 20:01:27 +05:30
Madhu Rajanna 15da42cf0c csi: change sidecar images repo to new link
Change sidecar images repo to registry.k8s.io
which is a redirect to k8s.gcr.io.

Ref: https://github.com/kubernetes/k8s.io/wiki/
New-Registry-url-for-Kubernetes-(registry.k8s.io)

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
2022-06-06 11:02:38 +05:30
Sébastien Han eb08db40e9 Merge pull request #10350 from subhamkrai/support-py2
external-script: remove signature import
2022-06-03 08:49:58 +02:00
Travis Nielsen 134b41a8d6 Merge pull request #10309 from parth-gr/external-fqdn1
rgw: make fqdn rgw converted to ip everywhere
2022-06-02 09:08:38 -06:00
Travis Nielsen 832cebc4c1 Merge pull request #10349 from subhamkrai/doc-latest-change
docs: update doc path according to new doc change
2022-06-01 09:25:44 -06:00
subhamkrai 49a35a9311 docs: update doc path according to new doc change
we need to update the referred doc path
according to our latest doc change.

Signed-off-by: subhamkrai <srai@redhat.com>
2022-06-01 20:17:44 +05:30
Travis Nielsen 23eaa62f72 Merge pull request #10345 from caffeinism/patch-1
docs: add prepareosd to placement
2022-06-01 08:30:01 -06:00
Kim Minjong 8f713e22dc docs: add prepareosd to placement
Add prepareosd entry to cluster.yaml docs.
Add prepareosd as an example of placement (commented out)

Signed-off-by: Kim Minjong <make.dirty.code@gmail.com>
2022-06-01 21:13:03 +09:00
parth-gr fed91ddb81 rgw: make fqdn rgw converted to ip everywhere
During the recent addtions of rgw validation
changes there are too many places where we use
rgwendpoint, so making fqdn to ip conversion globally

Signed-off-by: parth-gr <paarora@redhat.com>
2022-05-31 15:11:36 +05:30
Madhu Rajanna 02b9f199d7 csi: add volumeattachment list rbac
rbd nodeplugin need volumeattachment RBAC
to remount the volume incase of the nbd driver
is used to mount the volume.
Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
2022-05-31 15:09:34 +05:30
subhamkrai c8f11f3e62 core: clean the import section
import all the libraries at top.

Signed-off-by: subhamkrai <srai@redhat.com>
2022-05-30 16:04:30 +05:30
subhamkrai 60bf1f6e1c core: remove signature import
remove signature import as it is not required.

Signed-off-by: subhamkrai <srai@redhat.com>
2022-05-30 16:04:12 +05:30
parth-gr cbda9f2f7d csi: update cephfs osd caps
Currently cephfs caps are data=filesystemname,
which only have write access, but not the read access
changing it to *=filesystemname so we can read data also

Signed-off-by: parth-gr <paarora@redhat.com>
2022-05-25 18:56:54 +05:30
Travis Nielsen 1fe71fc76f Merge pull request #10271 from humblec/rbac-cleanup-2
Adjust PV object RBAC  for CSI PODs
2022-05-17 07:26:00 -06:00
Travis Nielsen 362e3a6578 Merge pull request #10247 from Madhu-1/remove-cephfs-node-rbac
csi: Remove extra cephfs node rbac
2022-05-16 08:40:16 -06:00
Humble Chirammal 34e88776e7 csi: remove unwanted verbs for pv object
pv object patch verb is enough for the csi sidecar to function.

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2022-05-16 14:35:34 +05:30
Humble Chirammal 0812d08a75 csi: remove watch verb from csi-snapshottter sidecar RBAC
The `watch` verb is not required for the csi-snapshotter sidecar
to function, removing it from the deployment

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2022-05-16 13:21:42 +05:30
Madhu Rajanna e4133857e9 csi: remove extra cephfs RBAC
Remove unwanted cephfs clusterRole
RBAC.

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
2022-05-16 10:52:21 +05:30